System and Method for Analysis and Authentication of Covert Security Information Using a Smart Device
A system and method for hidden security feature detection, analysis and authentication using a smart device is disclosed. The smart device can detect and analyze hidden security features using the camera capability of the smart device to capture a digital image, and then analyze and authenticate that image using a security service including a database of security feature data, processing rules, and other information. The security service can support a variety of smart devices and security features. The smart device includes a security-specific autofocus function that allows the smart device to be positioned within a range of distances and angles from a target document that includes hidden/covert security feature(s). The smart device can display an enhanced image showing the hidden security feature(s) and/or report if the security feature is valid or invalid, along with related information, via beeps, vibration, display, text messaging, or other reporting capabilities.
Latest DOCUMENT SECURITY SYSTEMS, INC. Patents:
This application claims priority to, and the benefit of, U.S. Provisional Patent Application No. 61/713,422, filed Oct. 12, 2012, and U.S. Provisional Patent Application No. 61/719,385, filed Oct. 27, 2012, the contents of which are hereby incorporated herein by reference in their entireties.
FIELDThe present disclosure relates generally to systems for capturing, analyzing and authenticating documents and/or images, and more particularly to systems and methods of detecting and authenticating hidden or covert security features using smart devices such as, for example, smart phones.
BACKGROUNDUnless otherwise indicated herein, the materials described in this section are not prior art to the claims in this application and are not admitted to be prior art by inclusion in this section.
For several reasons, it is highly desirable to identify counterfeit or fraudulent documents, such as to identify fraudulent products with counterfeit packaging and/or other identifying information. Advancing technology, such as improved software applications, printers and copiers, has enabled the proliferation of counterfeit documents. For example, grey market or knock-off goods are difficult to distinguish from authentic and/or authorized goods. Identifying a product as authentic based on its packaging or other documentation is especially important when dealing with products, such as pharmaceutical products, where the effect of a counterfeit product may be life-threating. As additional examples, a counterfeit vehicle title can be very costly to an unsuspecting purchaser, and fake coupons can be costly to a business. Therefore, it is important to develop a method for providing tamper-resistant security information in documents along with the ability to readily authenticate that security information.
SUMMARYThe following disclosure is directed toward detecting and authenticating hidden security features using smart devices. According to some embodiments, a smart device is equipped with a camera and a capture application which combine to provide focusing, filtering, and image capture capability. According to some embodiments, the smart device is configured to capture and preprocess images containing hidden security features, and communicate with a network-based security service for decoding and authentication of hidden security features. According to some embodiments, the smart device is configured to communicate with a decoding application, decision processor, and database on the smart device to decode and authenticate hidden security features. According to some embodiments, information as to the authenticity of the hidden security feature and any related information is then received by the smart device and reported to a user via a variety of available methods, such as text messaging, email, audible alerts, displaying of decoded images, or similar methods.
These as well as other aspects, advantages, and alternatives, will become apparent to those of ordinary skill in the art by reading the following detailed description, with reference where appropriate to the accompanying drawings.
The accompanying drawings, which are incorporated into this specification, illustrate one or more example embodiments disclosed herein and, together with the detailed description, serve to explain the principles and example implementations of the present disclosure. One of skill in the art will understand that the drawings are illustrative only, and that what is depicted therein may be adapted based on the text of the specification and the spirit and scope of the teachings herein.
As a means of product identification and tracking, a barcode such as a Universal Product Code (UPC) or a Quick Response (QR) code is often printed on the packaging of consumer products. These printed codes are optically scanned for rapid decoding. However, barcodes are readily visible on the product packaging and are susceptible to copying, adjustment, and other forgery. To reduce fraud, it is desirable to add hidden security information to product packaging as an alternative, or in conjunction with, barcode information and/or other tracking and identification information.
The hidden security information can be, for example, objects, symbols, characters, and/or markers that are not easily visible to the human eye, yet can be detected by other means, such as by optical detection. Optimally, it would be desirable to authenticate hidden security information using smart devices, such as a smart phone or tablet, as smart devices are prevalent, configurable, and are often carried on a person thus readily available when authentication is desired. However, several challenges limit the use of smart devices for optical detection of hidden security information. First, the camera systems in smart devices are designed to focus on faces, not hidden security information, and this is problematic if the hidden security information does not have contrast points for use in focusing. Also affecting the process is the effect of varying focal lengths on the image capture process, possibly requiring the smart device camera to be positioned at a predetermined distance and/or angle from the target in order to capture hidden security information. Additionally, mobile smart devices may have reduced computing power and/or battery life.
Systems and methods for hidden security feature detection and authentication using smart devices are provided. In some embodiments, the smart device acts as a remote client in a client-server architecture, capturing an image of a document potentially containing a hidden security feature and communicating with a server to process and authenticate the image. A smart device is a device that (1) includes an operating system that allows it to execute software, firmware, or hardware applications, (2) includes a digital camera, and (3) includes the capability to communicate via a network. According to some embodiments, a smart device is a mobile device, such as a smartphone or tablet device. The system uses the smart device in combination with a hosted security service to process physical documents with respect to covert security features. While hidden or covert security features are not easily visible to the human eye, the document security system uses image processing to determine the presence or absence of hidden or covert security features in digital images of physical documents, wherein the digital images are captured using the smart devices. According to some embodiments, the image processing and identification of the hidden or covert security features is provided via a hosted (e.g., cloud-based) security service that can support a plurality of smart devices and a variety of customized hidden security features.
According to some embodiments, the system provides configurable applications for mobile platforms that decode and authenticate hidden or covert security features. This can be accomplished using internal manipulation of the camera feed, image processing both on the smart device and a cloud-based server, and/or database lookup/authentication capability on the cloud-based server. In one example, the hosted security service supports a plurality of camera-enabled smart devices, wherein the digital image data acquired by each device is used to identify the presence or absence of hidden/covert security features in physical documents. Additionally, the hosted (e.g., cloud-based) security service processes the hidden or covert security features with respect to certain rules that determine what action(s) are returned to an originating smart device. Further, according to some embodiments, the hosted security service can, for audit purposes, maintain a record of all images processed using the document security system described herein. Accordingly, in some embodiments, a camera-enabled smart device in combination with a hosted security service of the document security system provides a configurable and convenient method of processing hidden/covert security features in physical documents that is otherwise not possible using conventional methods.
A user 175 accesses security service 130 via a smart device 105 and then uses the smart device 105 as a convenient and portable mechanism for authenticating documents. Smart device 105 may comprise, for example, any smart mobile device that (1) includes an operating system (OS) that allows execution of software applications, (2) includes a built-in digital camera, and (3) includes network capability. Examples of smart device 105 include, but are not limited to, Android-based phone, the Apple iPhone, the Apple iPad, the Samsung Galaxy tablet, Windows phone, and Blackberry phone or tablet. As such, smart device 105 may include mobile operating system(s), such as, but not limited to, the Android OS from Google, Inc., the BlackBerry OS from Research In Motion Limited (RIM), the iOS from Apple Inc., the Series40 (S40) OS from Nokia, the Symbian OS from Nokia and Accenture, the Bada OS from Samsung Electronics, the Windows Phone OS from Microsoft, and the webOS from Hewlett Packard.
However, smart device 105 of system 100 is not limited to smart mobile devices only. Smart device 105 of system 100 may be any computing device that is capable of running software applications, that includes a built-in digital camera or that is otherwise connected to a digital camera, and that has network capability. Namely, smart device 105 can be, for example, a personal digital assistant (PDAs), mobile phone, scanning/imaging device, tablet device, desktop computer, laptop computer, dedicated document scanning device, and/or server.
Each smart device 105 includes or is otherwise connected to a digital camera 110. Raw digital images 112 are any images captured using camera 110 of the smart device 105. A user 175 can use camera 110 of their smart device 105 as a convenient means to capture raw digital images 112 of a physical document to be analyzed via security system 130. For example, user 175 can use camera 110 of their smart device 105 to capture raw digital images 112 of secured physical document 120 that include hidden/covert security feature(s) 122 or of unsecured physical document 124, wherein unsecured physical documents 124 do not include hidden/covert security feature 122. Both secured physical document 120 and unsecured physical document 124 can be any hardcopy document (e.g., hardcopy paper document, credit card, government-issued ID, currency, etc) or physical surface of any object (e.g., product packaging or product itself) that have, for example, alphanumeric characters, symbols, markers, and/or graphics thereon, such as applied by printing. The print density of the document may be between a range from about 1% to 90%, but will commonly be in the range from approximately 5% to 70%.
Hidden/covert security feature 122 of secured physical document 120 is, for example, alphanumeric characters, objects, symbols, or markers that are not easily visible to the human eye, yet can be detected using features of document security system 100. In some embodiments, hidden/covert security feature 122 comprises a background/foreground image including big dot configurations, little dot configurations, ODT pantographs, AGPantograph 4000, Prism™ technology, barcodes (including UPC, GS1, Data Matrix, QR, PDF417, Aztec, or other barcodes), dots and lines over pantograph, microprint over pantograph, pantograph under/over the VeriGlow™ technology from Document Security Systems, Inc (Rochester, N.Y.), and/or Prism™ technology combined with VeriGlow™ technology. Examples of hidden/covert security feature 122 have been previously described in U.S. Patent application No. 61/555,843, filed Nov. 4, 2011, entitled “System and Method for Dynamic Generation of Embedded Security Features in a Document;” U.S. patent application Ser. No. 11/495,900 entitled “Covert Document System;” U.S. patent application Ser. No. 11/741,394 entitled “Document with Linked Viewer File for Correlated Printing;” U.S. Pat. No. 7,906,198 entitled “Document Containing Security Images;” and U.S. Pat. No. 7,976,068 entitled “Double-blind Security Features,” each of which is incorporated herein by reference in its entirety.
Any information may be encoded into hidden/covert security feature 122. For example, hidden/covert security feature 122 may convey unique product information, unique promotional codes, ownership information (e.g., name, address, phone number), any user-defined information, any mark indicating authenticity, and the like.
According to some embodiments, secured physical document 120 and unsecured physical document 124 may be documents that are specific to entities that subscribe to security service 130 of system 100. Therefore, the hidden/covert security feature 122 that is embedded in secured physical document 120 may be designed according to certain parameters provided by each respective security service subscriber 170. In other words, hidden/covert security feature 122 may be a subscriber-specific security feature or combination of features. To support multiple security service subscribers 170, a capture application 114 is provided on smart device 105, wherein the capture application 114 is a software application that is a configurable to meet the security specifications of a given security service subscriber 170. In one example, capture application 114 is implemented as a smartphone app, such as an Android app or an iPhone app. In another example, capture application 114 is implemented as a tablet app, such as an iPad app or Galaxy Tab app.
Hidden/covert security features 122 are constructed, for example, using lines, dots, dashes, whitespaces, or microprint whose features are spaced too closely to be visible by the human eye. To the eye, these lines, dots, dashes, whitespace, or microprint simply appear as, for example, a tinted region revealing no discernable content. However, these lines, dots, dashes, whitespaces, or microprint are optically detectable via camera 110. According to some embodiments, the lines, dots, dashes, whitespaces, or microprint that form the hidden/covert security feature 122 are designed according to parameters provided by the security service subscriber 170, wherein the parameters may be different from one security service subscriber 170 to another. Accordingly, in some embodiments, capture application 114 includes a set of parameters 115.
According to some embodiments, any information in parameters 115 can be modified to customize the detection capability for security purposes. Parameters 115 include, for example, line frequency, screen angles, text/content, image structure, color, and related data. Further, in some embodiments, the contents of parameters 115 are subscriber-specific. For example, a smart device 105 associated with a first security service subscriber 170 may include parameters 115 that are specific to the first security service subscriber 170. However, a smart device 105 associated with a second security service subscriber 170 may include parameters 115 that are specific to the second security service subscriber 170, thus allowing the capture application 114 to be configured based on security service subscribers 170. Also, parameters 115 may comprise specific configuration information for patterns used within hidden security features 122, such as the configuration of the pattern shown in
According to some embodiments, capture application 114 installed on a smart device 105 further includes a security-specific autofocus function 116 that is used for controlling the focus of camera 110. As is well-known, autofocus is a function that automatically focuses the camera lens on a subject. The mechanisms of autofocus functions found on cameras can be roughly classified into two categories—phase detection and contrast detection. However, according to some embodiments, security-specific autofocus function 116 differs from the standard autofocus function included in standard digital cameras in that it tailors the autofocus function based on the information in parameters 115, and combines the autofocus process with a filtering process to attempt to identify image data corresponding to hidden/covert security features 122. In some embodiments, security-specific autofocus function 116 uses the information in parameters 115, which corresponds to the design of a hidden/covert security feature 122 to be detected, to control the focal length adjustment during the autofocus and filtering process in such as way as to optically reveal the image data corresponding to hidden/covert security feature 122. This process may be aided by a focusing target or pattern embedded in hidden/covert security feature 122, which will allow the capture application 116 to optimally capture the latent image and/or text in hidden/covert security feature 122 using the focusing target or pattern. Because the information in parameters 115 can differ from one security service subscriber 170 to another, the security-specific autofocus function 116 of capture application 114 is configurable from one security service subscriber 170 to another.
The presence of security-specific autofocus function 116 in capture application 114 allows the smart device 105 to be positioned at a wide range of acceptable distances and angles from the target. Alternatively, in some embodiments, the smart device 105 can be positioned at a pre-determined angle and/or range, such as, for example, a fixed smart device system used for applications such as airport gate ticket verification, event ticketing, or store checkout. During the autofocus operation, with each focal length adjustment a preview image 113 is streamed in real time from camera 110 to capture application 114. Security-specific autofocus function 116 attempts to focus and filter preview image 113 to optically reveal image data corresponding to the hidden/covert security feature 122. If the hidden/covert security feature 122 is in focus and optically revealed, a raw digital image 112 that includes the hidden/covert security feature 122 is captured. In the case of unsecured physical document 124 in which no hidden/covert security feature 122 is present, the security-specific autofocus function 116 ends the focus and filtering process after a configurable number of attempts and then captures the raw digital image 112. In some embodiments, the smart device 105 may then report to the user 175 that no hidden/covert security feature 122 was found.
According to some embodiments, capture application 114 may generate an audible indicator, a visual indicator, a tactile indicator, or any combinations thereof when the autofocus function is complete and the raw digital image 112 has been captured. For example, using the capabilities already built into the smart device 105, capture application 114 can generate a beeping or buzzing sound, a readable message on the display, or a vibration to indicate that the raw digital image 112 has been captured.
System 100 provides benefits over current smart device applications for detecting hidden/covert security features in documents. In one example, system 100 provides a security specific autofocus function, whereas existing smart device applications do not provide such function. The system 100 allows the smart device 105 to detect hidden/covert security features from a wide range of focal lengths and angles. Thus, the smart device 105 is not required to be oriented in a specific manner or at a specific distance relative to the secured physical document 120. Additionally, system 100 allows for configurable security features, such that the hidden/covert security feature(s) 122 can be adjusted and/or optimized for particular customers and/or secured physical documents 120, yet multiple types of hidden/covert security features 122 can be analyzed by a smart device 105. Thus, the system 100 is sufficiently flexible to support a variety of security service subscribers 170, smart devices 105, and hidden/covert security features 122
According to some embodiments, the purpose of the security-specific autofocus function 116 is not to perform the decoding process, which is the process of identifying and authenticating hidden/covert security features 122. Instead, the purpose of the security-specific autofocus function 116 is to acquire a raw digital image 112 in which the hidden/covert security feature 122 is revealed with enough clarity or detail that the feature can be decoded automatically using image processing software. According to some embodiments, once a raw digital image 112 is captured using camera 110, parameters 115, and security-specific autofocus function 116, the capture application 114 is used for preprocessing the image data of raw digital images 112. For example, the preprocessing performed by capture application 114 is to modify the original image data of raw digital images 112 in a manner that is useful for further image processing at security service 130, and more particularly for detecting hidden/covert security feature 122 at security service 130. In image processing, the preprocessing operation can be, for example, smoothing. According to some embodiments, based on the subscriber-specific information in parameters 115, capture application 114 can be used to apply certain optical filtering, certain angles, certain line frequency, certain color, certain density, certain micro-printing to raw digital images 112. Capture application 114 can segment a portion of raw digital images 112 according to predetermined locations at which security features would be expected to appear. In this way, raw digital images 112 are processed using capture application 114 to produce processed digital images 118 that are more appropriately suited for security feature decoding. According to some embodiments, in processed digital images 118 a certain amount of, for example, the background image, opposite angle image, dot size, and/or dot shape has been filtered out, thereby revealing, for example, the lines, dots, dashes, whitespaces, and/or microprint of the foreground image (i.e., the hidden security feature(s)) to at least some degree.
Then, in some embodiments, using the information in parameters 115 that is supplied by capture application 114 combined with certain image processing methods, the hidden/covert security feature 122 in processed digital images 118 is detectable and/or decoded at security service 130. For example, processed digital images 118, along with subscriber-specific information from parameters 115, are transmitted via network 160 to a decoding application 132 at security service 130. Using subscriber-specific information in parameters 115, decoding application 132 performs additional image processing to further enhance processed digital images 118 in order to detect image data corresponding to hidden/covert security features 122 embedded therein. According to some embodiments, decoding application 132 is based, for example, on image processing algorithms, such as algorithms based on the Prism™ technology from Document Security Systems, Inc (Rochester, N.Y.) as well as standard digital image processing algorithms, such as linear filtering, pixilation, fractals, and other known processes.
According to some embodiments, if an acceptable original raw digital image 112 is obtained from of a secured physical document 120, decoding application 132 will detect information related to a hidden/covert security feature 122 embedded therein according to parameters 115. However, if the original raw digital image 112 is an image of an unsecured physical document 124, no hidden/covert security feature 122 will be detected by decoding application 132. Additionally, with respect to secured physical documents 120, the hidden/covert security feature 122 thereof may be authentic; however, there is also the possibility of counterfeit hidden/covert security feature 122, e.g. hidden/covert information in the document 102 that is fake, forged, or otherwise inauthentic. In the latter case, secured physical documents 120 are counterfeit secured physical documents 120.
In the case of secured physical document 120, decoding application 132 passes data relating to the hidden/covert security feature 122 that it detected, to a decision processor 134 of security service 130. In one example, decoding application 132 only passes the image data of the hidden/covert security feature 122 found in processed digital image 118 to decision processor 134, e.g. via filtering, cropping, or otherwise screening the image data to remove unnecessary information. In another example, decoding application 132 passes the image data of the entire processed digital image 118 (including the image data relating to hidden/covert security feature 122) to decision processor 134. However, in the case of unsecured physical documents 124, decoding application 132 may optionally pass information to decision processor 134 that information relating to a hidden/covert security feature 122 is absent from the processed digital image 118. In either case, in processing the information received from decoding application 132, decision processor 134 queries a database 140 of security service 130. In yet another embodiment, the decoding application 132 and decision processor 134 are combined into a single function or process, and/or the decoding application 132 communicates directly with database 140.
Stored in database 140 are, for example, security feature data 142, rules data 144, tracking data 146, and image data 148. Security feature data 142 includes a record of unique hidden/covert security features 122 that have been verified as authentic. Additionally, security feature data 142 includes a record of hidden/covert security features 122 that have been identified as counterfeit. Like parameters 115, the information in security feature data 142 may be subscriber-specific. Using decision processor 134, the image data associated with a hidden/covert security feature 122 detected by decoding application 132 is compared to information in security feature data 142 in order to uniquely identify the associated hidden/covert security feature 122. According to some embodiments, there are unique identifying marks, data, and the like in hidden/covert security features 122 so that the data from hidden/covert security features 122 can be properly associated with additional metadata upon lookup on the security service 130, as further discussed below and illustrated in
Once the data relating to hidden/covert security feature 122 has been verified, decision processor 134 queries rules data 144 for information about actions to be taken. Like parameters 115, the information in rules data 144 may be subscriber-specific. In one example, rules data 144 may indicate to transmit a text message (e.g., via SMS) to the originating smart device 105. Using the example of a hidden/covert security feature 122 on a product package, wherein the hidden/covert security feature 122 indicates product information, examples of text messages include AUTHENTIC PRODUCT, NOT AUTHENTIC PRODUCT, FOR USE IN USA ONLY, or any other customized message as appropriate for a particular product package. Using the example of a hidden/covert security feature 122 on a paper document, wherein the hidden/covert security feature 122 indicates authenticity, examples of text messages include AUTHENTIC DOCUMENT, NOT AUTHENTIC DOCUMENT, and the like.
In another example, rules data 144 may indicate to engage a certain third-party service 150. For example, if a counterfeit hidden/covert security feature 122 is detected, security service 130 may electronically mark the associated image data to indicate the counterfeit and/or transmit a message to an administrator, a document author, a document controller, a product manufacturer or distributor, a law enforcement agency or other authoritative entity, and the like, which are examples of third-party services 150. In another example, if the hidden/covert security feature 122 is associated with a marketing promotion, security service 130 may transmit a message to a marketing agency or a product manufacturer or distributor, which are other examples of third-party services 150. In response, the marketing agency may transmit marketing information (e.g., a coupon, a promotion code, etc.) to the originating smart device 105. Third-party services 150 may communicate directly with the originating smart device 105 via network 160. Additionally or alternatively, third-party services 150 may pass all or certain communications with smart device 105 through security service 130.
According to some embodiments, tracking data 146 of database 140 of security service 130 includes records of all processed digital images 118 that are received and processed via security service 130. In some embodiments, each record in tracking data 146 includes tracking information for a particular digital image transaction, such as, for example, user ID, device ID, network address, timestamp, etc. Additionally, for each record in tracking data 146, the image data of the processed digital image 118 itself and/or other data relating to the hidden/covert security feature 122 may be stored for auditing purposes in image data 148 of database 140.
According to some embodiments, configuration application 136, which is an optional component of security service 130, is an administrator tool that is used to pre-configure security feature data 142, rules data 144, tracking data 146, and image data 148. In addition to information as previously described, rules data 144 may also include user-level or group-level permissions with respect to access to security service 130 of system 100 and/or with respect to access to secured physical document 120.
Document security system 100 provides the capability to maintain a single, centralized repository of data relating to hidden/covert security features 122 against which digital images of secured physical documents 120 and unsecured physical documents 124 can be compared, regardless of origin. According to some embodiments, when certain hidden/covert security features 122 are changed or new hidden/covert security features 122 are created, the database 140 is updated thereby affecting how secured physical documents 120 are serviced in the future.
According to some embodiments, an example of the operation of system 100 is as follows. The user 175 uses his/her smart device 105 to capture a digital image of the secured physical document 120 that he/she wishes to authenticate. For example, the user 175 points the camera 110 of his/her smart device 105 at the secured physical document 120 and initiates the authentication process. In so doing, security-specific autofocus function 116 of the capture application 114 queries parameters 115 and then performs the autofocus function. Once the camera 110 is focused on the hidden/covert security feature 122, to begin the decoding process, a raw digital image 112 is captured. The capture application 114 performs preprocessing operations on the raw digital image 112 and generates a processed digital image 118. The processed digital image 118 of the document to be authenticated is transmitted via network 160 to security service 130 for decoding and/or verification. According to some embodiments, decoding application 132 of security service 130 uses image processing algorithms for analyzing the processed digital image 118 in order to detect data relating to hidden/covert security features 122 embedded therein. Then, decision processor 134 and information stored on database 140 are used to verify the hidden/covert security feature 122 and determine its authenticity. Security service 130 then returns the authentication results to the originating smart device 105. Once the authentication results are received at the originating smart device 105, notifications may optionally be provided such as, for example, audible, visual, or tactile indicators indicating whether the target secured physical document 120 is authentic or not authentic. For example, audible beeps at the originating smart device 105 can be used to indicate authenticity—one beep=authentic, two beeps=not authentic. As another example, a text message can be used to report the authenticity information. According to some embodiments, additional information relating to the hidden/covert security feature 122, including but not limited to image information associated with the security feature (e.g. a barcode such as a UPC, GS1, Data Matrix, QR, PDF417, Aztec, or other barcodes), location information, the image itself enhanced to show the hidden security information, and/or other related information is displayed on the smart device 105.
According to another embodiment, the system 100 can operate to display a preview of a security image on a smart device 105 as follows. The user 175 uses his/her smart device 105 to capture a digital image of the secured physical document 120 that he/she wishes to authenticate. For example, the user 175 points the camera 110 of his/her smart device 105 at the secured physical document 120 and initiates the authentication process. In so doing, security-specific autofocus function 116 of the capture application 114 queries parameters 115 and then performs the autofocus and filtering functions. In some embodiments, the autofocus function 116 is aided by a preferred focus target within the hidden/covert security feature 122, such as the examples shown in
The system is not limited to the system configurations shown in
The disclosure described herein is not limited to documents containing hidden/covert security features, instead, the concepts of this disclosure may be applied to any media capable of including hidden/covert security feature 122, including but not limited to documents and/or images displayed electronically (e.g. on a video monitor, smart device, television, etc.), tattoos or similar markings, artwork, labels, packaging, and any other media capable of incorporating hidden/covert security feature 122 as discussed herein.
At 410, using the security-specific autofocus function 116, a digital image of a physical document, or portion thereof, is captured using a mobile device camera. For example, the user 175 points the camera 110 of his/her smart device 105 at secured physical document 120 containing hidden/covert security feature 122 and initiates the authentication process. In so doing, security-specific autofocus function 116 of the capture application 114 queries parameters 115 and then uses the information in parameters 115 as part of the focusing and filtering process used to reveal an image of hidden/covert security feature 122 during the autofocus function. According to some embodiments, the capture application 114 applies filtering at the same time as focusing to simultaneously adjust focal length and attempt to recognize hidden patterns and text in preview image 113 corresponding to hidden/covert security feature 122. The focusing and filtering operations may take place many times per second until the capture application 114 recognizes a pattern corresponding to hidden/covert security feature 122. In some embodiments, the capture application 114 has a set time period to recognize hidden patterns and/or text, and upon timeout determines the hidden/covert security feature 122 to be invalid or not present, and optionally captures an image for investigation purposes and/or storage in the database 140 under the assumption that the image may be an image of a counterfeit mark. Once a hidden/covert security feature 122 is sufficiently focused to begin the decoding process, as determined by the capture application 114, a raw digital image 112 is captured. According to some embodiments such as those shown in
At 412, image data associated with the captured image is preprocessed and then the preprocessed image is passed to the decoding application 132. For example, capture application 114 preprocesses the image data of the raw digital image 112, thereby producing a processed digital image 118. In some embodiments, based on the subscriber-specific information in parameters 115, capture application 114 applies certain optical filtering, angles, line frequency, color, density, and/or micro-printing to raw digital images 112 and generates the corresponding processed digital image 118 in which a portion of, for example, the background image, opposite angle image, dot size, or dot shape has been filtered out, thereby revealing, for example, the lines, dots, dashes, whitespaces, or microprint of the foreground image (i.e., the hidden security feature) to at least some degree. Additionally or alternatively, capture application 114 can segment a portion of raw digital images 112 according to predetermined locations at which security features would be expected to appear, using standard image segmentation algorithms according to known references and/or software.
Algorithms for performing image processing can be found in many engineering textbooks relating to image processing, such as “Digital Image Processing” by Rafael C. Gonzalez & Richard E. Woods (3rd edition 2008) which is incorporated herein by reference in its entirety. In some embodiments, open source software libraries may be used for image detection. According to some embodiments, GPUImage software (see http://www.sunsetlakesoftware.com/2012/02/12/introducing-gpuimage-framework) can be used for image processing capabilities including live video stream filtering, to view the target image and adjust for pattern detection. This software may be used to apply a convolution matrix to detect horizontal or vertical lines, adjust exposure based on image brightness, adjust contrast to increase edge sharpness within the image, adjust to median settings to remove stray pixels, filter out noise based on a threshold, and perform other functionality applicable to the present disclosure. Additionally or alternatively, in some embodiments, Zebra Crossing software (see http://code.google.com/p/zxing/) can be used for image processing of barcodes in addition to other functionality applicable to the present disclosure. Additionally or alternatively, in some embodiments, OpenCV software (see http://opencv.willowgarage.com/wiki/) can be used for image processing capabilities such as enhanced edge detection and shape recognition, including Hough Circle Transform, to provide enhanced circle detection within a raw digital image 112.
After pre-processing, the processed digital image 118 is transmitted via network 160 to decoding application 132 at security service 130. Alternatively, in document security system 100 of
At 414, an image analysis operation is performed of the processed digital image 118 and then the resulting decoded image is passed to the decision processor 134. In some embodiments, using subscriber-specific information in parameters 115, decoding application 132 performs additional image processing to further enhance processed digital images 118 in order to reveal the image of hidden/covert security feature 122 to a greater degree than in the original processed digital images 118. Image data and/or other information relating to the hidden/covert security feature 122 is then passed from decoding application 132 to decision processor 134.
At 416, it is determined whether the information received from decoding application 132 is associated with a hidden/covert security feature 122. If the decoded information sufficiently matches a stored image and/or other data associated with a security feature 122, the document is determined to be a secured physical document 120. Otherwise, the document is determined to be an unsecured physical document 124. For example, if decision processor 134 determines that a hidden/covert security feature 122 is detected, method 400 proceeds to 418. However, if decision processor 134 determines that no hidden/covert security feature 122 is detected, method 400 proceeds to 428 (shown in
At 418, the image of the security feature in the decoded image is identified. For example, using decision processor 134, any image data related to hidden/covert security feature 122 detected by decoding application 132 and/or decision processor 134 is compared to information in security feature data 142 in order to identify the hidden/covert security feature 122.
In some cases, the decoded image of the security feature may be processed by an optical character recognition (OCR) module to identify and/or characterize recognizable characters in the decoded image. An example of an OCR engine that may be used is the Tesseract OCR engine, although other OCR engines may be used. For example, the decision processor 134 and/or decoding application 132 may include an OCR module that identifies characters in the decoded image, and then characterizes the security feature 122 on the basis of the identified characters. In some cases, the security feature 122 may include a substantially unique set of characters, and may be associated with a serial number, for example. Examples of patterns (arrays) of characters that may be included in an image are included, by way of example, in
At 420, it is determined whether the secured physical document 120 is authentic. For example, if the data relating to hidden/covert security feature 122 matches a verified hidden/covert security feature in security feature data 142, method 400 proceeds to 422. However, if no match is found in security feature data 142 to the data relating to hidden/covert security feature 122, method 400 proceeds to 434 (shown in
At 422, rules are applied for the authenticated security feature and certain actions are determined. For example, decision processor 134 queries rules data 144 of database 140 for rules that apply to the authentic hidden/covert security feature 122 and determines what actions, if any, are to be performed (e.g., transmit a text message to originating smart device 105). Further, the rules that are applied may be subscriber-specific because rules data 144 may include subscriber-specific information.
At 424, actions/instructions are returned to the originating mobile device. The actions/instructions that are returned may be subscriber-specific because rules data 144 may include subscriber-specific information. In one example, security service 130 transmits a text message (e.g., via SMS) to the originating smart device 105, wherein the text message is AUTHENTIC PRODUCT, AUTHENTIC DOCUMENT, VALID-EXPIRED MARK, VALID MARK: INVALID-LOCATION, or similar message based on rules data 144. In another embodiment, security service 130 transmits data directing the smart device to display the enhanced image showing the hidden data in the hidden/covert security feature 122. Additionally or alternatively, this information is combined with information decoded from a barcode or similar image associated with the hidden/covert security feature 122 and/or location information.
At 426, tracking and image information is stored in the database 140. In some embodiments, each record in tracking data 146 includes tracking information for a particular digital image transaction, such as, for example, user ID, device ID, network address, timestamp, etc. Additionally or alternatively, for each record that is created, the image data of the processed digital image 118 and/or the image data of the identified hidden/covert security feature 122 are stored in image data 148 of database 140. Method 400 ends.
At 428 (
At 430, actions/instructions are returned to the originating mobile device. The actions/instructions that are returned may be subscriber-specific because rules data 144 may include subscriber-specific information. In one example, security service 130 transmits a text message (e.g., via SMS) to the originating smart device 105, wherein the text message is UNSECURED DOCUMENT. In another example, the absence of a hidden/covert security feature 122 may indicate a fraudulent or counterfeit product, such as when the product packaging is required to have a security feature to verify authenticity. Therefore, a text message (e.g., via SMS) is transmitted to the originating smart device 105, wherein the text message is COUNTERFEIT PRODUCT. Further, security service 130 optionally transmits a message to a law enforcement agency or other authoritative entity, which are third-party services 150.
At 432, tracking and image information is stored in the database. For example, a record is created in tracking data 146 that includes, for example, user ID, device ID, network address, and timestamp. Additionally, for the record that is created, the image data of the processed digital image 118 is stored in image data 148 of database 140. Method 400 ends.
At 434 (
At 436, actions/instructions are returned to the originating mobile device. The actions/instructions that are returned may be subscriber-specific because rules data 144 may include subscriber-specific information. In one example, security service 130 transmits a text message (e.g., via SMS) to the originating smart device 105, wherein the text messages is COUNTERFEIT DOCUMENT. Further, security service 130 optionally transmits a message to a law enforcement agency or other authoritative entity, which are third third-party services 150.
At 438, tracking and image information is stored in the database 140. For example, a record is created in tracking data 146 that includes, for example, user ID, device ID, device location, and timestamp. Additionally, for the record that is created, the image data of the processed digital image 118 and/or the identified hidden/covert security feature 122 are stored in image data 148 of database 140. Method 400 ends.
Turning to
In some embodiments, security service 530 comprises a decoding application 532, decision processor 534, and database 540. Database 540 comprises security feature data 542, rules data 544, tracking data 546, and image data 548. According to some embodiments, security service 530 is communicatively coupled, via network 160, to configuration application 536, third-party services 150, and/or security service subscribers 170.
The functionality of security service 530 is similar to the security service 130 described in relation to system 100, with the exception that the security service 530 is provided directly on smart device 105. For example, according to some embodiments, if an acceptable original raw digital image 112 is obtained from of a secured physical document 120, decoding application 532 detects information related to a hidden/covert security feature 122 embedded therein according to parameters 115 and/or processed digital images 118. Accordingly, decoding application 532 passes data relating to the detected hidden/covert security feature 122 to a decision processor 534 of security service 530. In order to evaluate the data from decoding application 532, decision processor 534 queries a database 540 of security service 530. Stored in database 540 are, for example, security feature data 542, rules data 544, tracking data 546, and image data 548.
According to some embodiments, security feature data 542 includes a record of unique hidden/covert security features 122 that have been verified as authentic. Additionally, security feature data 542 may include a record of hidden/covert security features 122 that have been identified as counterfeit. Like parameters 115, the information in security feature data 142 may be subscriber-specific. Using decision processor 534, the image data associated with a hidden/covert security feature 122 detected by decoding application 532 is compared to information in security feature data 542 in order to uniquely identify and/or verify the associated hidden/covert security feature 122. According to some embodiments, there are unique identifying marks, data, and the like in hidden/covert security features 122 so that the data from hidden/covert security features 122 can be properly associated with additional metadata upon lookup on the security service 530.
Once the data relating to hidden/covert security feature 122 has been verified, decision processor 534 queries rules data 544 for information about actions to be taken. The information in rules data 544 may be subscriber-specific. In one example, rules data 544 may indicate a message to be displayed on the smart device 105. According to some embodiments, rules data 544 may indicate that selected image data from secured physical document 120 be displayed on the smart device 105, such as, for example, the enhanced image data allowing the image associated with hidden/covert security feature 122 to be easily viewed with the unaided eye. According to some embodiments, rules data 544 may indicate to provide messages as to the authenticity of the document 120 or 124, and/or engage network based third-party services 150 as described in regards to
According to some embodiments, tracking data 546 of database 540 of security service 530 includes records of all processed digital images 118 that are received and processed by smart device 105 via security service 130. In some embodiments, each record in tracking data 546 includes tracking information for a particular digital image transaction, such as, for example, user ID, device ID, network address, timestamp, etc. Additionally, for each record in tracking data 546, the image data of the processed digital image 118 itself and/or other data relating to the hidden/covert security feature 122 may be stored for auditing purposes in image data 548 of database 540.
According to some embodiments, configuration application 536, which is an optional component of security service 530, is an administrator tool that is used to configure and/or adjust information in database 540 relating to security feature data 542, rules data 544, tracking data 546, and image data 548. According to some embodiments, configuration application 536 communicates with database 540 via network 160, allowing for a centralized control and/or administration of data in database 540. In some embodiments, configuration application 536 includes data relating to pattern recognition, void marks, expired marks, and/or other administrative information. For example, when information is available regarding a counterfeit hidden/covert security feature 122, the configuration application 536 may communicate with database 540 to provide image data and processing rules related to the counterfeit security feature.
Document security system 500 provides the capability to maintain a security service 530 directly on the smart device 105, which is desirable for applications requiring, for example, enhanced security. According to some embodiments, the image data and/or parameters relating to hidden/covert security feature 122 are not sent over a network and therefore are less susceptible to unintended or fraudulent access, e.g. hacking. Thus, system 500 provides a document analysis and authentication solution for environments where a network is not immediately available and/or it is undesirable to communicate certain data over a network, such as for systems used by customs personnel that are required to meet specific security protocols.
In some embodiments, the security service 530 on smart device 105 is not directly accessible to a user 175 of smart device 105 and/or is only configurable via configuration application 536. According to some embodiments, security service subscribers 170 and/or third-party services 150 are configured to push updated information to database 540 via network 160. In some embodiments, when certain hidden/covert security features 122 are changed or new hidden/covert security features 122 are created, the database 540 is updated thereby affecting how secured physical documents 120 are serviced by smart device 105 in the future. According to some embodiments, individual or aggregate data collected by database 540 is periodically communicated to third-party services 150, security service subscriber 170 and/or configuration application 536.
In
In
In
Element 601, 602, 603 and 604 have the same positioning on the X-axis
Element 605 and 612 have the same positioning on the X-axis
Element 606 and 611 have the same positioning on the X-axis
Element 607, 608, 609, and 610 have the same positioning on the X-axis
In
Element 601, 612, 611, and 610 have the same positioning on the Y-axis
Element 602 and 609 have the same positioning on the Y-axis
Element 603 and 608 have the same positioning on the Y-axis
Element 604, 605, 606, and 607 have the same positioning on the Y-axis
Additionally, the relative spacing between elements of each corner of the pattern is uniform. For example, the spacing between element 601 and 612 is approximately the same as the spacing between elements 601 and 602. In some embodiments, the spacing between the elements in a corner grouping is approximately 40 pixels. Furthermore, the relative spacing between corner groups is uniform, for example, the distance from element 601 to 610 is approximately the same as the distance from element 604 to 607, from 601 to 604, or from 610 to 607. According to some embodiments, additional textual and/or data can be added inside the four corners of the pattern. According to some embodiments, the thickness of the line denoting the circle in elements 601-612 is at least approximately ⅛th inch thick.
According to some embodiments, the pattern of
In some embodiments, the pattern is screened to match the hidden/covert security feature 122. According to some embodiments, the hidden/covert security feature 122 contains the phrase “VALID” or similar language to indicate the authenticity of a barcode or other image adjacent to the hidden/covert security feature 122. In some embodiments, red dots over black pantograph is used as the hidden/covert security feature 122 to conceal the “VALID” text, or similar language, as the red dots camouflage the black pantograph. Accordingly, once the text is revealed according to the authentication process, the smart device may report the authentication of the barcode, along with inventory information or other information contained via reading the barcode.
Turning to
In
In
In some embodiments, in addition to capturing information relating to the hidden/covert security feature 122, the capture application 114 will also interact with the Global Positioning System (GPS) capabilities of the smart device to determine and record the location of the smart device at the time of the capture process. Location information can then be locally stored on the smart device and/or provided to the network 160 for further use, such as storing location data as part of tracking data 146 in database 140.
In some embodiments, the smart device allows for additional data to be received from a user and/or for information to be sent by a user (for example, via email or text message) after the capture/decode process. Additionally or alternatively, the smart device allows for storage of the enhanced image revealing the hidden security information. In some embodiments, these user functions are only enabled after verification of the authenticity of the hidden/covert security feature 122 and/or confirmation of additional permissions according to security service subscriber 170. According to some embodiments, successful authentication of the document allows for printing of a second document (e.g. a ticket) or display of a corresponding image on the smart device.
In
Turning to
In the example shown in
Although, it is noted that the above description of
According to some embodiments, elements of this disclosure may be used to authenticate a variety of documents and related products, including but not limited to the following: protection/secondary authentication of product codes on product packaging (such as verification of destination country for pharmaceutical products), authentication of unique or expensive goods (such as signed memorabilia), control of imports/exports (such as for luxury goods commonly counterfeited), warehouse management and tracking (such as the destination information and expiration date of perishable items), authentication of important documents such as ID cards or title documents, verification of promotional materials or gaming tickets, identification of product recalls, and many other applications relying on the authentication, via a smart device, of hidden security information within a document.
Many functions described herein may be implemented in hardware, firmware, or software. Further, software descriptions of the disclosure can be used to produce hardware and/or firmware implementing the disclosed embodiments. According to some embodiments, software and/or firmware may be embodied on any known non-transitory computer-readable medium having embodied therein a computer program for storing data. In the context of this disclosure, computer-readable storage may be any tangible medium that can contain or store data for use by, or in connection with, an instruction execution system, apparatus, or device. For example, a non-volatile computer-readable medium may store software and/or firmware program logic executable by a processor to achieve one or more of the functions described herein in connection with
In view of the exemplary systems described above, methodologies that may be implemented in accordance with the described subject matter will be better appreciated with reference to the various figures. For simplicity of explanation, the methodologies are depicted and described as a series of acts. However, acts in accordance with this disclosure can occur in various orders and/or concurrently, and with other acts not presented and described herein. Furthermore, not all illustrated acts may be required to implement the methodologies in accordance with the disclosed subject matter. In addition, those skilled in the art will understand and appreciate that the methodologies could alternatively be represented as a series of interrelated states via a state diagram or events. Additionally, it should be appreciated that the methodologies described in this disclosure are capable of being stored on an article of manufacture to facilitate transporting and transferring such methodologies to computing devices.
Although some of various drawings illustrate a number of logical stages in a particular order, stages which are not order dependent can be reordered and other stages can be combined or broken out. Alternative orderings and groupings, whether described above or not, can be appropriate or obvious to those of ordinary skill in the art of computer science. Moreover, it should be recognized that the stages could be implemented in hardware, firmware, software or any combination thereof.
The foregoing description, for purpose of explanation, has been described with reference to specific embodiments. However, the illustrative discussions above are not intended to be exhaustive or to be limiting to the precise forms disclosed. Many modifications and variations are possible in view of the above teachings. The embodiments were chosen and described in order to best explain the principles of the aspects and its practical applications, to thereby enable others skilled in the art to best utilize the aspects and various embodiments with various modifications as are suited to the particular use contemplated.
Claims
1. A system for authenticating at least one hidden security feature, the system comprising:
- a secure physical document with at least one hidden security feature; and
- a smart device comprising a processor, a camera, a capture application, and a security service;
- wherein the camera captures image information corresponding to the at least one hidden security feature to be authenticated, the capture application performs processing, via the processor, to generate a processed digital image containing image data corresponding to the hidden security feature;
- and wherein the security service receives the processed digital image containing image data corresponding to the hidden security feature from the capture application, processes, via the processor, the processed digital image containing image data corresponding to the hidden security feature, and sends data to the smart device indicating the authenticity of the processed digital image containing image data corresponding to the hidden security feature.
2. The system of claim 1, wherein the at least one hidden security feature comprises a hidden target pattern.
3. The system of claim 2, wherein the at least one hidden security feature comprises hidden textual information.
4. The system of claim 2, wherein the camera communicates with a security-specific autofocus function, the security-specific autofocus function analyzing image data corresponding to the hidden target pattern.
5. The system of claim 1, wherein the hidden security feature is accomplished using PRISM security technology.
6. The system of claim 1, wherein the hidden security feature is accomplished using VERIGLOW security technology.
7. The system of claim 1, wherein the hidden security feature is adjacent to a barcode.
8. The system of claim 7, wherein the barcode is a two-dimensional barcode.
9. The system of claim 8, wherein the barcode is one of a QR code, data matrix, PDF417, or Aztec.
10. The system of claim 1, wherein the security service comprises a database, the database comprising security feature data, rules data, tracking data, and image data.
11. A system for authenticating documents, the system comprising:
- a document comprising hidden data to be authenticated;
- a smart device comprising a processor, a camera, and a capture application; and
- a security service communicatively coupled to the smart device.
12. The system of claim 11, wherein the camera captures a preview image of hidden data to be authenticated, the camera communicates the preview image to the capture application, and the capture application filters the preview image to optically reveal the hidden data to be authenticated.
13. The system of claim 12, wherein the capture application communicates data to the camera to adjust focus and generate a second preview image.
14. The system of claim 12, wherein the hidden data to be authenticated comprises a preferred focus pattern.
15. The system of claim 12, wherein the document comprises a barcode, and the barcode is positioned such that the hidden data to be authenticated is adjacent to a barcode.
16. The system of claim 15, wherein the hidden data substantially surrounds the barcode.
17. A method of authenticating a hidden security feature using a smart device, the smart device comprising a display, a camera and a security application, the method comprising:
- capturing, via the camera, an image of a hidden security feature;
- processing, via the security application, the image to create a processed image;
- communicating the processed image to a security server, the security server comprising a decision processor and a database, the database comprising security feature data;
- determining, via the decision processor and according to the security feature data, the authenticity of the processed image and generating corresponding authenticity information;
- communicating the authenticity information to the capture application; and,
- displaying the authenticity information on the display of the smart device.
18. The method of claim 16, wherein the hidden security feature comprises a target pattern and text.
19. The method of claim 17, wherein the target pattern and text are hidden using PRISM security technology.
20. The method of claim 17, wherein the target pattern and text are hidden using VERIGLOW security technology.
Type: Application
Filed: Mar 15, 2013
Publication Date: Apr 17, 2014
Patent Grant number: 9171347
Applicant: DOCUMENT SECURITY SYSTEMS, INC. (Rochester, NY)
Inventors: Michael Caton (Oakfield, NY), Michael Roy (Webster, NY), Timothy Trueblood (Pittsford, NY), Patrick White (Mendon, NY), David Wicker (Dansville, NY)
Application Number: 13/838,892